PT-2024-32973
CVE-2024-48059
·
تاريخ النشر
2024-11-04
·
تاريخ التحديث
2024-11-05
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
gaizhenbiao/chuanhuchatgpt project, version <=20240802
Description
The issue is related to stored Cross-Site Scripting (XSS) in WebSocket session transmission. An attacker can inject malicious content into a WebSocket message. When a victim accesses this session, the malicious JavaScript is executed in the victim's browser.
Recommendations
For version <=20240802, update to a version later than 20240802 to resolve the stored Cross-Site Scripting (XSS) issue in WebSocket session transmission. As a temporary workaround, consider restricting access to WebSocket sessions to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾